HP Intelligent Management Center Licenses - Manual (Page 6)

iMC platform, and adds the account management and account group management functions in
addition to the previous user management functions. The account information contains the account
name, password, permissions, and account group information in addition to the basic user
information. The component does not provide any configuration management interface. After being
deployed, the component acts as an independent background process.
The account group in iMC is a set of the function permissions of users. An account can belong to
multiple groups. The permissions of the account are the union set of the permissions of the account
and the permissions of all the account groups that the account belongs to.
Figure 2 Customize the account group and permissions for an account
The following section describes the relationship among user, account, permissions, and account
group.
•
An account group can contain multiple users, and a user can belong to multiple account
groups. The main function of an account group is to automatically assign self-service permissions
to users. When creating an account group, you can assign permissions to the account group.
After a user is added to one or multiple account groups, the permissions (available self services
and available functions in each self service) of the user are the union set of the self-service
permissions assigned to the user when the self service is enabled for the user and the self-service
permissions of all the account groups that the user belongs to.
•
An account group can contain any number of child account groups. For a parent account
group and its child account groups, a child account group has its own permissions and all
the permissions of the parent account group rather than the parent account group has the
permissions of all the child account groups. The design is consistent with the permission
relationship between an organization and its departments.
•
The account name uniquely identifies an account. If an account is canceled and then an
account of the same name is opened, the new account is automatically assigned the process
execution permissions of the previous account. For example, assume the account Sherry is
assigned the permission of Information Auditing of the Default Account Registration Process.
6 Introduction/Overview